StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,482
of 17,792 indexed, latest versions
Container images
2,497
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,482 of 17,792 indexed charts deploy, on 2,497 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,332
coreutilsrpm8.29-lp151.3.3, 8.32-32.el9, 8.32-34.el9, 8.32-35.el9+6 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more154
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.173
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,482 by stars
ChartLatestAffected imagesRadar Score
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-dashboard:latestb53a854bd7c1
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

13,712
akto-ai-guardrails-v2akto0.3.05 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

5 of the 6 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
coreutils@9.7-3
no fix listed
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
coreutils@9.7-3
no fix listed
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
coreutils@9.7-3
no fix listed
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
redis/redis-stack-server:7.4.0-v172035434f455
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4

Open the chart page →

9,505
akto-central-setupakto1.1.105 of 5See more

akto-central-setup akto 1.1.10

5 of the 5 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
library/eclipse-temurin:211f79c73404fb
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2b53a854bd7c1
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.28e01c0305844
coreutils@8.32-40.el9
0:8.32-41.el9_8

Open the chart page →

5,118
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

1,206
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

1,170
akto-hybrid-redactakto1.44.62 of 5See more

akto-hybrid-redact akto 1.44.6

2 of the 5 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.4_local5bda14f66e8e
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

4,098
akto-mini-runtimeakto0.7.223 of 3See more

akto-mini-runtime akto 0.7.22

3 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
coreutils@8.32-40.el9
0:8.32-41.el9_8
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
coreutils@9.7-3
no fix listed

Open the chart page →

2,826
akto-mini-runtime-shaakto0.7.232 of 3See more

akto-mini-runtime-sha akto 0.7.23

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafkadigest-pinnedd20bd62f0182
coreutils@8.32-39.el9
0:8.32-41.el9_8
public.ecr.aws/aktosecurity/redisdigest-pinned47200b041382
coreutils@9.1-1
no fix listed

Open the chart page →

3,258
akto-mini-testingakto1.45.73 of 5See more

akto-mini-testing akto 1.45.7

3 of the 5 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
coreutils@9.1-1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
coreutils@8.32-40.el9
0:8.32-41.el9_8

Open the chart page →

6,580
akto-mrs-runtime-combinedakto0.0.21 of 2See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

1,852
akto-regional-setupakto1.3.15 of 9See more

akto-regional-setup akto 1.3.1

5 of the 9 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
redis/redis-stack-server:7.4.072035434f455
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.28e01c0305844
coreutils@8.32-40.el9
0:8.32-41.el9_8

Open the chart page →

7,828
akto-runtimeakto0.1.82 of 2See more

akto-runtime akto 0.1.8

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
coreutils@8.32-40.el9
0:8.32-41.el9_8

Open the chart page →

1,474
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3

Open the chart page →

4,866
akto-threat-backendakto0.1.52 of 2See more

akto-threat-backend akto 0.1.5

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
coreutils@8.32-40.el9
0:8.32-41.el9_8

Open the chart page →

1,553
akto-threat-clientakto0.2.02 of 2See more

akto-threat-client akto 0.2.0

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
coreutils@8.32-40.el9
0:8.32-41.el9_8

Open the chart page →

1,585
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3

Open the chart page →

3,487
cliproxyapialekcVerified publisher0.5.31 of 1See more

cliproxyapi alekc 0.5.3

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eceasy/cli-proxy-api:v7.3.3f9abbf3fa5fe
coreutils@9.1-1
no fix listed

Open the chart page →

1,119
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
coreutils@9.7-3
no fix listed

Open the chart page →

1,941
plexalekcVerified publisher2.10.11 of 1See more

plex alekc 2.10.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
linuxserver/plex:1.43.41f6f97d76e7b
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1

Open the chart page →

647
alertigatealertigate0.5.11 of 1See more

alertigate alertigate 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:1.2.1628d49e0e01b
coreutils@9.7-3
no fix listed

Open the chart page →

1,560
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
coreutils@9.1-1
no fix listed

Open the chart page →

6,352
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
coreutils@9.1-1
no fix listed

Open the chart page →

27,554
slskdalexmorbo-slskdVerified publisher0.3.01 of 1See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/slskd/slskd:0.25.1ab9ed50e028b
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

1,732
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
coreutils@9.7-3
no fix listed

Open the chart page →

1,674
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
redisalexvanderberkelVerified publisher2.2.01 of 1See more

redis alexvanderberkel 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/redis:8.2.15fa2edb1e408
coreutils@9.1-1
no fix listed

Open the chart page →

1,869
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:latestdc171ec796d5
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

3,691
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
coreutils@9.1-1
no fix listed

Open the chart page →

4,533
pagesalstom-pages-app1.0.02 of 3See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
coreutils@8.30-3ubuntu2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

20,242
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4

Open the chart page →

28,289
anchore-admission-controlleranchore-charts0.9.01See more

anchore-admission-controller anchore-charts 0.9.0

1 container image this version deploys carries CVE-2025-5278.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
coreutils@9.1-1
no fix listed

Open the chart page →

—
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
coreutils@9.1-1
no fix listed

Open the chart page →

5,865
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
coreutils@9.7-3
no fix listed

Open the chart page →

1,609
pagesandrei-pages1.0.02 of 3See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
coreutils@8.30-3ubuntu2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

20,242
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

11,582
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
coreutils@9.1-1
no fix listed

Open the chart page →

7,312
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
coreutils@9.1-1
no fix listed

Open the chart page →

4,063
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
coreutils@8.30-3ubuntu2
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
coreutils@8.30-3ubuntu2
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

42,325
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
coreutils@9.7-3
no fix listed

Open the chart page →

5,591
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
coreutils@9.1-1
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
coreutils@9.1-1
no fix listed

Open the chart page →

25,816
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
coreutils@9.7-3
no fix listed

Open the chart page →

1,454
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mongo:8.002a0cc7939f5
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

4,621
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
coreutils@9.7-3
no fix listed

Open the chart page →

3,261
flow-aggregatorantreaVerified publisher2.7.01 of 1See more

flow-aggregator antrea 2.7.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
antrea/flow-aggregator:v2.7.0065193e7572f
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

764
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
coreutils@8.32-36.el9
0:8.32-41.el9_8

Open the chart page →

2,961
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4

Open the chart page →

6,256
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

19,788
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
coreutils@9.1-1
no fix listed

Open the chart page →

2,655
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
coreutils@9.1-1
no fix listed

Open the chart page →

2,957
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
coreutils@9.1-1
no fix listed

Open the chart page →

3,296

Container images carrying it

2,497 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
1
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
public.ecr.aws/aktosecurity/redis47200b041382
coreutils@9.1-1
no fix listed
1
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
coreutils@9.7-3
no fix listed
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
public.ecr.aws/datadog/cloudprem:v0.1.33bda08753668d
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
coreutils@9.7-3
no fix listed
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
coreutils@8.32-35.el9
0:8.32-41.el9_8
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
coreutils@9.1-1
no fix listed
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
coreutils@9.1-1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
coreutils@9.1-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
coreutils@9.1-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
coreutils@9.1-1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
coreutils@9.1-1
no fix listed
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
coreutils@9.1-1
no fix listed
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
coreutils@9.1-1
no fix listed
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
coreutils@9.1-1
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
coreutils@9.1-1
no fix listed
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
coreutils@8.32-36.el9
0:8.32-41.el9_8
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
coreutils@8.32-36.el9
0:8.32-41.el9_8
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
coreutils@8.28-1ubuntu1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
coreutils@8.30-3ubuntu2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
coreutils@9.1-1
no fix listed
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
coreutils@8.32-35.el9
0:8.32-41.el9_8
1
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
coreutils@8.32-36.el9
0:8.32-41.el9_8
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
coreutils@8.32-36.el9
0:8.32-41.el9_8
1
quay.io/aerokube/jumphost:1.0.170fd7c00418d
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
quay.io/aerokube/keygen:1.0.1578934444f04
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
coreutils@8.32-35.el9
0:8.32-41.el9_8
1
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
quay.io/backube/volsync:0.16.00d03a6aad575
coreutils@8.32-40.el9
0:8.32-41.el9_8
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
coreutils@9.1-1
no fix listed
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
coreutils@9.1-1
no fix listed
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
coreutils@8.32-36.el9
0:8.32-41.el9_8
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
coreutils@8.28-1ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.